Quantum testers for hidden group properties^ 
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Abstract 

We construct efficient or query efficient quantum property testers for two existential group properties 
which have exponential query complexity both for their decision problem in the quantum and for 
their testing problem in the classical model of computing. These are periodicity in groups and the 
common coset range property of two functions having identical ranges within each coset of some normal 
subgroup. Our periodicity tester is efficient in Abelian groups and generalizes, in several aspects, 
previous periodicity testers. This is achieved by introducing a technique refining the majority correction 
process widely used for proving robustness of algebraic properties. The periodicity tester in non- Abelian 
groups and the common coset range tester are query efficient. 

1 Introduction 

In the paradigm of property testing one would like to decide whether an object has a global property by 
performing random local checks. The goal is to distinguish with sufficient confidence the objects which 
satisfy the property from those objects that are far from having the property. In this sense, property testing is 
a notion of approximation for the corresponding decision problem. Property testers, with a slightly different 
objective, were first considered for programs under the name of self-testers. Following the pioneering 



approach of Blum, Kannan, Luby and Rubinfeld [ BK95 , BLR93 ] , self-testers were constructed for programs 
purportedly computing functions with some algebraic properties such as linear functions, polynomial 
functions, and functions satisfying some functional equations [ |BLR93| , [RS96t p.ub99Q . The notion in its 
full generality was defined by Goldreich, Goldwasser and Ron and successfully applied among others to 
graph properties [ pGR98| , pR97[ ]. For surveys on property testing see [po!98|, |RonOO|, |KMSOO|, fis01|]. 



Quantum computing is an extremely active research area (for surveys see e.g. [ RPQO , Aha98 , Pre98| , 



NCOC ]), where a growing trend is to cast quantum algorithms in a group theoretical setting. In this setting, 



we are given a finite group G and, besides the group operations, we also have at our disposal a function / 
mapping G into a finite set. The function / can be queried via an oracle. The complexity of an algorithm is 
measured by the number of queries (i.e. evaluations of the function /), and also by the overall running time 
counting one query as one computational step. We say that an algorithm is query efficient (resp. efficient) if 
its query complexity (resp. overall time complexity) is polynomial in the logarithm of the order of G. The 
most important unifying problem of group theory for the purpose of quantum algorithms has turned out to 
be the Hidden Subgroup Problem (HSP), which can be cast in the following broad terms: Let H be a 
subgroup of G such that / is constant on each left coset of H and distinct on different left cosets. We say 
that / hides the subgroup H. The task is to determine the hidden subgroup H. 

While no classical algorithm can solve this problem with polynomial query complexity, the biggest 
success of quantum computing until now is that it can be solved by a quantum algorithm efficiently whenever 

*Research partially supported by the EU 5th framework programs QAIP 1ST- 1999-1 1234 and RAND-APX IST-1999-14036, 
and by CNRS/STIC 01N80/0502 and 01N80/0607 grants, and by OTKA T030059, T030132, and NWO-OTKA N34040 grants. 

^CAI, Hungarian Academy of Sciences, H-l 111 Budapest, Hungary, e-mail: friedl@sztaki.hu. Work done while visiting 
CNRS-LRI, Orsay. 

*CNRS-LRI, UMR 8623 University Paris-Sud, 91405 Orsay, France, e-mail: {magniez,santha}@lri . f r. 
^LRI, UMR 8623 Universite Paris-Sud, 91405 Orsay, France, e-mail: pranab@lri . f r. 



1 



G is Abelian. We will refer to this algorithm as the standard algorithm for the HSP. The main tool 
for this solution is Fourier sampling based on the (approximate) quantum Fourier transform for Abelian 
groups which can be efficiently implemented quantumly [ |Kit95| ] . Simon's xor-mask finding [ Sim97 ], 
Shor's factorization and discrete logarithm finding algorithms [ |Sho97 ], and Kitaev's algorithm [Kit95] for 
the Abelian stabilizer problem are all special cases of this general solution. Fourier sampling was also 
successfully used to solve the closely related Hidden Translation Problem (HTP). Here we are 
given two injective functions /q and /i from an Abelian group G to some finite set such that, for some 
group element u, the equality /q(x + u) = fi(x) holds for every x. The task is to find the translation u. 
Indeed, the HTP is an instance of the HSP in the semi-direct product G x Z2 where the hiding function is 
f(x, b) = fb{x). In that group / hides the subgroup H = {(0, 0), (u, 1)}. Ettinger and H0yer [ EHO0| ] have 
shown that the HTP can be solved in cyclic groups G = Z n by a two-step procedure: an efficient quantum 
algorithm followed by an exponential classical stage without further queries. They achieved this by applying 
Fourier sampling in the Abelian direct product group G x Z2. Ina recent work, we have shown [ fMSS02 ] 
that HTP can be solved by an efficient quantum algorithm in some groups of fixed exponent, for instance 
when G = Zp for any fixed prime number p. This gives a quantum polynomial time algorithm for the HSP 
in G x Z2 using the quantum reduction of HSP to HTP [ EHOO ] . In strong opposition to these positive results, 
a natural generalization of the HSP has exponential quantum query complexity even in Abelian groups. In 
this generalization, the function / may not be distinct on different cosets. Indeed, the unordered database 
search problem can be reduced to the decision problem whether a function on a cyclic group has a non-trivial 
period or not. 

Two different extensions of property testing were studied recently in the quantum context. The first 
approach consists in testing quantum devices by classical procedures. Mayers and Yao [ MY98 ] have 
designed tests for deciding if a photon source is perfect. These tests guarantee that if a source passes them, 
it is adequate for the security of the Bennett-Brassard [BB84] quantum key distribution protocol. Dam, 
Magniez, Mosca and Santha [DMMSOC] considered the design of testers for quantum gates. They showed 
the possibility of classically testing quantum processes and they provided the first family of classical tests 
allowing one to estimate the reliability of quantum gates. 

The second approach considers testing deterministic functions by a quantum procedure. Quantum testing 
of function families was introduced by Buhrman, Fortnow, Newman, and Rohrig [ BFNR02 ], and they have 
constructed efficient quantum testers for several properties. One of their nicest contributions is that they have 
considered the possibility that quantum testing of periodicity might be easier than the corresponding decision 
problem. Indeed, they succeeded in giving a polynomial time quantum tester for periodic functions over ZJ . 
They have also proved that any classical tester requires exponential time for this task. Independently and 
earlier, while working on the extension of the HSP to periodic functions over Z which may be many-to-one 
in each period, Hales and Hallgren [ HHO0| , Hal02] have given the essential ingredients for constructing a 
polynomial time quantum tester for periodic functions over the cyclic group Z n . But contrarily to [ BFNR02 ] , 
their result is not stated in the testing context. 

In this work, we construct efficient or query efficient quantum testers for two hidden group properties, 
that is, existential properties over groups whose decision problems have exponential quantum query 
complexity. We also introduce a new technique in the analysis of quantum testers. 

Our main contribution is a generalization of the periodicity property studied in [ HHOO , BFNR02 ]. For 
any finite group G and any normal subgroup K, a function / satisfies the property LARGER-PERIOD^) 
if there exists a normal subgroup H > K for which / is H -periodic {i.e. f(xh) = f(x) for all x G G 
and h G H). For this property, we give an efficient tester whenever G is Abelian (Theorem ^). This result 
generalizes the previous periodicity testers in three aspects. First, we work in any finite Abelian group G, 
while previously only G = Z n JHHOO ] and G = TH^ [BFNR02] were considered. Second, the property 
we test is parametrized by some known normal subgroup K, while previously only the case K = {0} was 
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considered. Third, our query complexity is only linear in the inverse of the distance parameter, whereas the 
previous works have a quadratic dependence. These improvements are possible due to our more transparent 
analysis. We refine the standard method of classical testing, which consists in showing that a function / that 
passes the test can be corrected into another function g that has the desired property, and which is close to 
/. The novelty of our approach is that here the correction is not done directly; it involves an intermediate 
correction via a probabilistic function. 

The main technical ingredient of the periodicity test in Abelian groups is efficient Fourier sampling. 
This procedure remains a powerful tool also in non-Abelian groups. Unfortunately, currently no efficient 
implementation is known for it in general groups. Therefore, when dealing with non-Abelian groups, our 
aim is to construct query efficient testers. We construct query efficient testers for two properties. First, we 
show that the tester used for LARGER-PERIOD(iv~) in Abelian groups yields a query efficient tester when 
G is any finite group and K any normal subgroup (Theorem [2]). Second, we study in any finite group G 
the property COMMON-COSET-RANGE(/c, t) (for short CCR(M)) related to the HTP. Let f,g be two 
functions from G to a finite set S. By definition, (/, g) satisfies CCR(/c, t) if / and g have identical ranges 
within each coset for a normal subgroup H < G of size at most k, and which is the normal closure of a 
subgroup generated by at most t elements. The heart of the tester for CCR(/c, t) is again Fourier sampling 
applied in the direct product group G x Z2. Our tester is query efficient in any group if k is poly logarithmic 
in the size of the group (Theorem ^). 

Different lower bounds can be proven on the query complexity of CCR(/c, t). One observes easily that 
unordered database search can be reduced to CCR(fc, 1) in Abelian groups of exponent k, and therefore 
CCR(/c, 1) is quantumly exponentially hard to decide. Moreover, we show that classical testers also require 
an exponential number of queries for this problem even if k is constant (Theorem ||). We show this by 



adapting the techniques of [BFNR02], who proved the analogous result for classical testers for periodicity. 



2 Preliminaries 

2.1 Fourier sampling over Abelian groups 

For a finite set D, let the uniform superposition over D be \D) = YlxeD l x )> anc ^ f° r a function 

/ from D to a finite set S, let the uniform superposition of f be |/) = YlxeD \ x )\f( x ))- F° r two 

functions /, g from D to S, their distance is dist(/, g) = \{x G D : f(x) ^ g{x)]\l\D\. The following 
proposition describes the relation between the distance of two functions and the distance between their 
uniform superpositions. In this paper, ||-|| denotes the L 2 - norm of a vector. 

Proposition 1. For functions f, g defined on the same finite set, dist(/, g) = \ || |/) — \g) || 2 . 

Let G be a finite Abelian group and H < G a subgroup. The coset of x G G with respect to H is 
denoted by x + H. We use the notation <X> for the subgroup generated by a subset X of G. We identify 
with G the set G of characters of G, via some fixed isomorphism y 1— » Xy The orthogonal of H < G 

is defined as H 1 - = {y € G : Vh G H, Xv (h) = 1}, and we set \H ± {x)) = J$j'E veH ±Xv(x)\y). 
The quantum Fourier transform over G, QFT G , is the unitary transformation defined as follows: For every 
x G G, QFT G |x) = , 1 X]«eG Xy( x )\y)- The main property about QFT G that we use is that it maps the 



f\G\ 

uniform superposition on the coset x + H to the uniform superposition on H 1 - , with appropriate phases. 

QFT 

Proposition 2. Let G be a finite Abelian group, x G G and H < G. Then \x + H) \H- L (x)). 

The following well known quantum Fourier sampling algorithm will be used as a building block in our 
quantum testers. In the algorithm, / : G — > S is given by a quantum oracle. 
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Fourier sampling^ (G) 

1. Create zero-state |0) G |0) S . 

2. Create the superposition ^2 x eG \ x ) * n tne ^ rst register. 

3. Query function /. 

4. Apply QFT G on the first register. 

5. Observe and then output the first register. 

The above algorithm is actually the main ingredient for solving the HSP on Abelian groups with hiding 
function /. 

2.2 Property testing 

Let D and 5 be two finite sets and let C be a family of functions from D to S. Let T C C be the subfamily of 
functions of interest, that is, the set of functions possessing the desired property. In the testing problem, one 
is interested in distinguishing functions / : D — > S, given by an oracle, which belong to T, from functions 
which are far from every function in T . 

Definition 1 (5-tester). Let fCC and < <5 < 1. A quantum (resp. probabilistic ) <5-tester for T onC is a 
quantum (resp. probabilistic) oracle Turing machine T such that, for every f G C, 

1. iff G J 7 then Pr[T^ accepts] = 1, 

2. i7dist(/,^) > 5 then Pr[T f rejects] > 2/3, 

where the probabilities are taken over the observation results (resp. the coin tosses) ofT. 

By our definition, a tester always accepts functions having the property T . We may also consider testers 
with two-sided error, where this condition is relaxed, and one requires only that the tester accept functions 
from T with probability at least 2/3. Of course, the choice of the success probability 2/3 is arbitrary, and 
can be replaced by 7, for any constant 1/2 < 7 < 1. 



3 Periodicity 

In this section, we design quantum testers for testing periodicity of functions from a finite group G to a 
finite set S. For a normal subgroup H < G, a function / : G — > S is H-periodic if for all x G G and 
h G H, f(xh) = f(x). Notice that our definition describes formally right i7-periodicity, but this coincides 
with left i7-periodicity since H is normal. The set of i^-periodic functions is denoted by Per(H). For 
a known normal subgroup H, testing if / G Per(H) can be easily done classically by sampling random 
elements x G G and h G H, and verifying that f{xh) = f(x). On the other hand, testing if a function has 
a non-trivial period is classically hard even in Z% QBFNR02D . The main result of this section is that we can 
test query efficiently by a quantum algorithm an even more general property: Does a function have a strictly 
larger period than a known normal subgroup K <G7 Indeed, we test the family 

LARGER-PERIODS) = {/ : G -» S \ 3H < G, H > K and / is ^-periodic}. 

Moreover when G is Abelian, our tester is efficient. 

For the sake of clarity we first present the result for Abelian groups. This enables us to highlight the new 
technique that we use. The standard way to ensure that the functions the tester accepts with high probability 
are close to functions having the desired property, is based on a direct correction process. This process has to 
produce a corrected function which has the desired property, and is close to the original function. This is the 



approach taken by [HHOO, BFNR02]. The novelty of our approach is that the correction is not done directly; 
it involves an intermediate corrected probabilistic function. This two-step process makes a more refined and 
cleaner analysis possible, and allows us to prove that our tester works in any finite group, whereas previous 
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works only considered the groups Z n [ HHOO ] and Z?j [ BFNR02 ]. Moreover, the query complexity of our 
algorithm turns out to be linear in the inverse of the distance parameter, unlike the quadratic dependence of 
the previous works. 



3.1 Abelian case 

In this subsection, we give our algorithm for testing periodicity in abelian groups. Theorem [j] below 
states that this algorithm is efficient. The algorithm assumes that G has an efficient exact quantum Fourier 
transform. When G only has an efficient approximate quantum Fourier transform, the algorithm has two- 
sided error. Efficient implementations of approximate quantum Fourier transforms exist in every finite 



Abelian group [ Kit95 ] 



Test Larger period^ (G, K, 5) 

1. N<- 41og(|G|)/5. 

2. For i = l,... , N do yi <— Fourier sampling^ (G). 

3. Accept iff <yi>i<i<N < K 1 . 



Theorem 1. For a finite set S, finite Abelian group G, subgroup K < G, and < 5 < 1, Test Larger 
period(G, K, 5) is a 5-tester for LARGER-PERIOD(iv") on the family of all functions from G to S, with 
0(\og(\G\)/5) query complexity and (log(\G\)/8)°^ time complexity. 

Let S be a finite set and G a finite Abelian group. We describe now the ingredients of our two-step 
correction process. First, we generalize the notion of uniform superposition of a function to uniform 
superposition of a probabilistic function. By definition, a probabilistic function is a mapping \i : x i— ► p x 
from the domain G to probability distributions on S. For every x E G, define the unit Li-norm vector 



I Ma 



X^se5 Ma;(' s )l s )- Then the uniform superposition of fx is defined as \p) 



Notice that \p) has unit L2-norm when p, is a (deterministic) function, otherwise its L2-norm is smaller. 

A function / : G — > S and a subgroup H < G naturally define an H -periodic probabilistic function 
pf> H , where fil' H (s) = — — is)0EHDi _ xhe value pl' H (s) is the proportion of elements in the coset x + H 
where / takes the value s. Observe that when / is //-periodic \p^ ,H ) = \f), and so II = 1, otherwise 

\\\p f > H )\\ <L 

First, we give the connection between the probability that Fourier sampling outputs an element outside 
H- 1 , and the distance between |/) and \p,*' H ). 

if>-H\\\ — I 1 - I' mi i*ii>i* I'lmitlino / 



Lemma 1. |/) 



Pr[Fourier sampling-' (G) outputs y £ H 



Proof. The probability term is 

y # H x iff y € {0}^ - 



E^gKO}^))!/^)) 



since 



which is L2-norm preserving, to the first register in the above expression. 

2 



We apply the inverse quantum Fourier transform QFT^ 1 , 

The probability becomes 



I/) 



inside the norm is 



, using Proposition |2[ Changing the variables, the second term 



1 1 1 xeG 1 1 heH V 1^1 zee 1 1 heH 



where the equality holds because H is a subgroup of G. We conclude by observing that, by definition of 
^ H ,jk]E h eH\f^ + h)) = Esesd' H (s)\s) = \d' H ). ■ h 

Second, we give the connection between dist(/, Pev(H)) and the distance between |/) and \fi^ ,H ). 
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Lemma 2. dist(/, Per(//)) < 2\\\f) - l^u^^) || 2 . 

Proof. It will be useful to rewrite |/) as a probabilistic function l — Ylx&G \ x ) SseS ^( s )l s )> where 



|G| 

Sx(s) = 1 if f(x) = s and otherwise. Let us define the H -periodic function g : G —* 5 by 
g(a;) = Maj ftei ^ /(x + h), where ties are decided arbitrarily. In fact, g is the correction of / with respect to 
//-periodicity. Proposition [j] and the //-periodicity of g imply dist(/, Per(//)) < | |||/) — |g)|| 2 '. We will 

low us to p 
S, we have 



show that \\\g) — \^' H }\\ < |||/) — This will allow us to prove the desired statement using the 

triangle inequality. Observe that for any function h : G 

2 1 



\h) - \^ H ) 

Moreover for every x G G, one can establish 

J2ses\^)-d' H (s)\ 2 - 



\G\ 



u f ' H 



(«)l s 



(1) 



|i - d' H (g(x))\ 2 + E^pfou/**- 
i + £ s6 ^P(s)) 2 



< i + E 



d' H (s)\ 2 , 



(d' H (s)) 2 

f ' H (f(x)) 



(2) 



where the inequality follows from fix (f(x)) < fi x (g(x)), which in turn follows immediately from the 
definition of g. 

From ([]]) and (^) we get that \\\g) — \^' H ) || < || |/) — \^' H ) || , which completes the proof. ■ 

Lemmas [j] and ^| together can be interpreted as the robustness [ RS96| , Rub99| ] in the quantum 
context [ DMMSQtH of the property that Fourier sampling^ (G) outputs only y G if / does not satisfy 
exactly the property but with error probability less than 8, then / is 25-close to a function that satisfies 
exactly the property. Using that fact, we can now prove Theorem [| 

Proof of Theorem^ If / G LARGER-PERIOD(/T), that is / is //-periodic for some H > K, then the 
quantum state before the observation of Fourier sampling^ (G) is 



(QFT G ® /) 



V|i>|/(i)) 




S^\ x + H)\f(x)) 



xeG 



VMH\ 



J2\HHx))\f(x))- 



x&G 



Above, / denotes the \ S\ x \S\ identity matrix. Therefore, Fourier sampling^ (G) only outputs elements in 
H L . Since H 1 - < K ± , the test always accepts. 

Let / be now <5-far from LARGER-PERIOD(/Q- Then for every H > K dist(/, Per (if)) > 5, and 
by Lemmas [j] and ||, PrfFourier sampling-^(G) outputs y G" > 5/2. Using these inequalities, we can 
upper bound the acceptance probability of the test as follows. 



Pr[<Vi>i<i<N < K x ] 



< 



Pr[3// > K, <y i > l < i < N < H L ] 

Pr[3x G G - K,yi€ <K, x> L for 1 < i < N] 

Max |Pr[Fourier sampling-^(G) outputs y G H~ 



\G\ 

< \G\{l-5/2) N < 1/3. 



'}) 



N 
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3.2 General case 



We start with a few definitions. For any d x d matrix M, define \M) = \/ r d^2 l<i j <d M i j\M,i,j). 

Let G be any finite group and let G be a complete set of finite dimensional inequivalent irreducible 
unitary representations of G. Thus, for any p G G of dimension d p and x G G, = 
\/^pSi<! j<d (p( a; ))i,ili J*)i)- The quantum Fourier transform over G is the unitary transformation 
defined as follows: For every x G G, QFT G |:c) = —)= J2 p ed \p( x ))- For any H <G set H 1 - = {p £ G : 



Idp}, where 1$ is the d p x d p identity matrix. Let \H- L (x)} = 

QFT G 



V/i G £T, 

Proposition 3. Let G be a finite group, x G G and H <G. Then \xH 



fW\^ 



\p(x)). 



Proof. We first prove that when iT is normal, the matrix L = J2heH P(h) is ■ id if p G i/ -1 , and 
otherwise. By definition of the condition p G H 1 - implies p(h) = Id for every h G i?, which gives 
the first part of the above. Now suppose that p H . Observe that since H is normal, L commutes with 
p(x) for every x G G. Therefore according to Schur's lemma (see for instance [ |Ser77 , Chap. 2, Prop. 4]), 
L = A • Id for some A G C. Since p G" H- 1 , we can pick some h G H such that / i^ ; then applying 
p(h) ■ L = L gives a contradiction if A / 0. This proves the second part of the above. 
We now complete the proof of the proposition as follows. 



QFT G \xH) = -±=^QFT G \xh) 

\/\U i,rr 



heH 



1 



vWW\ heH 



EX>(^)) 
1 EE^)> 

pad 



1 



VWWi 



E • L > 



'if, E k*)> 

where the penultimate equality follows from the above property of the matrix L. ■ 

We now give our algorithm for testing periodicity in a general finite group G. In the algorithm, 
Fourier sampling^ (G) is as before, except that we only observe the representation p, and not the indices 

Thus, the output of Fourier sampling-^ (G) is an element of G. K is assumed to be a normal subgroup 
of G. For any p G G, ker p denotes its kernel. 



Test Larger period^ (G, K, 5) 

1. iV<-41og(|G|)/5. 

2. For i = 1, . . . , N do pi <• 

3. Accept iff ni<j<jv ker 



- Fourier sampling^ (G). 
> if. 



We now prove the robustness of the property that Fourier sampling^ (G) outputs only p G for any 
finite group G, normal subgroup H and //-periodic function /. This robustness corresponds to Lemmas [T] 
and |H of the Abelian case. 
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Lemma 3. Let f : G — ► S and H <G. Then 

dist(/, Per (If)) < 2 • Pr [Fourier sampling^ (G) outputs p G" H L \. 

Proof. The proof has the structure of the Abelian case (see Lemmas [I] and ^]). Define \^' H ) in the same 
way. Observe that Lemma ^ is true in a general finite group. The proof of Lemma |l| follows the one for the 
Abelian case. The only difference is that we have to use Proposition || instead of Proposition ||| ■ 

Our second theorem states that Test Larger period is a query efficient tester for LARGER-PERIOD^) 
for any finite group G. 

Theorem 2. For a finite set S, finite group G, normal subgroup K < G, and < 5 < 1, Test Larger 
period(G, K, 5) is a 5-tester for LARGER-PERIOD(iv') on the family of all functions from G to S, with 
0(\og(\G\)/5) query complexity. 

Proof. The proof is similar to that of the Abelian case. Note that, while upper bounding the acceptance 
probability of the test when / is <5-far from LARGER-PERIOD(iv'), one has to consider only those normal 
subgroups H of the form H = Normal-closure (<K, x>), where x ranges over G — K. ■ 



4 Common Coset Range 

In this section, G denotes a finite group and S a finite set. Let /q, f\ be functions from G to S. For a 
normal subgroup H < G, we say that /q and f± are H-similar if on all cosets of H the ranges of /o and 
fi are the same, that is, the multiset equality fo(xH) = fi(xH) holds for every x G G. The couple of 
functions (/o, /i) can equivalently be considered as a single function / : G x Z2 —> S, where by definition 
f(x, b) = fb{x). We will use / for (/o, f\) when it is convenient in the coming discussion. We denote by 
Range(^f) the set of functions / such that /q and f\ are //-similar. We say that H is t-generated, for some 
positive integer t, if it is the normal closure of a subgroup generated by at most t elements. The aim of this 
section is to establish that for any positive integers k and t, the family COMMON-COSET-RANGE(/c, t) 
(for short CCR(A;, t)), defined as 

CCR(/c, t) = {/ : G x Z 2 -» S | 3H < G, \H\ < k, H is t-generated, f and /i are F-similar}, 

can be tested by the following quantum test. Note that a subgroup of size k is always generated by at most 
log k elements, therefore we always assume that t < log k. 



Test Common coset range^(G, k, t, S) 

1. jV^2/eilog(|G|)/<5. 

2. For i = 1, . . . , iV do (pi, bi) <— Fourier sampling^(G x Z2). 

3. Accept iff < G, |JT| < fc, iT is t-generated Vz (6j = 1 => p» i/ J 



We first prove the robustness of the property that when Fourier sampling^ [G x Z2) outputs (p, 1), 
where G is any finite group, H <G and / G Range(-ff), then p is not in H L . 

Lemma 4. Let S be a finite set and G a finite group. Let f : G x Z2 — > S a«<i H < G. Then 
dist(/, Range(ff)) < • Pr[Fourier sampling-^(G x Z2) outputs (p, 1) such that p G i?- 1 ]. 

Proof. We use the notations of Section [D] for / and /1. We define = 4=(\p;f°> H ) - \fi fl ' H )), and 



f H f H 

the multiplicity functions m J J" = \H\ ■ /x^' . 

First, we prove thatdist(/,Range(F)) < || |/, H) || 2 • \H\/2. For this, we define a function g\ : G — > S, 
the correction of f\. The definition is done according to the cosets of H in G. For every x G G and 
s G 5, the function g\ remains identical to fx in Min{m^ ' (s)^^' (s)} elements of xi/, and the 
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value of g\ at those elements is s; at the remaining elements of xH, the values of g\ are defined so as 
to make the multisets /q (xH) and g\ (xH) equal. If we define go = /o then clearly g = (go,gi) is in 
Range(-ff), and dist(/, g) = dist(/i, gi)/2. Since in every coset xH, f\ and g\ have different values in 
£ s65 |m| ' H (s)-m| 1,H (s)|/2 elements, wehavedist(/,5) = ^ Y,xeG/H Y,ses\ m x' H ( s ) -m^' H (s)|. 
The right hand side becomes |||/, H}\\ 2 ■ \H\/2 if we replace the terms \ml°' H (s) — rrix' H (s)\ by their 
respective squared values. This can only increase it since the values ml b,H (s) are integers. Thus, 



d\st(f,g)<\\\f,H)\\ 2 .\H\/2. 



We now prove that 
The probability term is 



/, H)\\ 2 = 2 • PrfFourier sampling^ outputs (p, 1) such that p G H J 



k^T, x e G \HHx))mfo(x))-\h(x))) 



2 



We apply the inverse 



2^\H\\G\ ^ xeG 1 

quantum Fourier transform QFT^ 1 , which is L2-norm preserving, to the first register in the above 

expression. Using Proposition and the fact that H is a subgroup of G, the probability becomes 

2 

E, se E te frk>|i)(l/oW)-l/iW)) 



Now one can conclude the above statement and 

hence the lemma, since by definition of m^ b,H , the equality Ylh&H \fb{xh)) = Ylses m « '^( s )l s ) 
holds. ' " ■ 

Our next theorem implies that CCR(fc, t) is query efficiently testable when k is polynomial in log|G|. 

Theorem 3. For any finite set S, finite group G, integers k > 1, 1 < t < log k, and < 5 < 1, Test 
Common coset range(G, k, t, 5) is a b -tester for CCR(A;, t) on the family of all functions from G x Z2 to 
S, with 0{kt \og(\G\)/b) query complexity. 

Proof. First consider the case / G CCR(/c, t), that is / is in Range(ff) for some H < G, \H\ < k and H 
is i-generated. From the proof of Lemma ||, we see that whenever Fourier sampling^ (G x Z 2 ) outputs an 
element (p, 1), then p G" H . Thus the test always accepts. 

Now, let / : G — > S be <5-far from CCR(A;, t) and let H be a i-generated normal subgroup of size at 
most k. Then dist(/, Range(-ff )) > 5 and by Lemma ^, PrfFourier sampling^ outputs (p, 1) : p G f/^] > 
<VI-^1 — V^- Using these inequalities we can upper bound the acceptance probability of the test, which is 

Pr[3H < G, \H\ < k, H is t-generated Vi (6j = 1 ^ ft ^ i?" 1 )] 
= Pr[3ui, ...u t eG, Normal-closure (<«i, . . . itt>) = < k \fi (hi = 1 ft iJ- 1 )] 



< IGI* ( Max ( Pr [Fourier sampling^ outputs (p,b) : (b = 1 => p G" -ff" 1 )!} 

ViT<lG,IHI<fc.Hist-senerated I J 



^iT<G,|H|<fc,_H" is t-generated 

< \G\\l-8/k) N < 1/3. 



iV 



5 A classical lower bound 

Let G be any Abelian group with exponent k. In this section, we study the property CCR(/c, 1) for 
k = (loglGI) ^). We already know from Theorem || that this problem has a query efficient quantum 
tester. We now prove an exponential lower bound on the classical testing query complexity of this problem. 
Recall that the exponent of a group G is the smallest integer m such that x m = 1 for every element x G G. 



We prove our lower bound by adapting the proof of Theorem 4.2 of Buhrman et al. [ |BFNRQ2| ]. We use Yao's 
minimax principle. We construct two probability distributions D' x and D' 2 on the set of pairs of functions 
(/o) /i)> /o) /1 : G — > S, where S is a finite set of size |S| = |G| 3 . Let D[ be the uniform distribution on 
pairs of injective functions (/o, f\) such that /o(x) = f\(x + u) for some element u G G and all x G G. 
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Thus, /q and /i are <u>-similar, and |<u>| < k. Let D 2 be the uniform distribution on pairs of injective 
functions (/o,/i) such that the ranges fo(G) and fi(G) are disjoint. Thus, D[ is supported on positive 
instances of CCR(/c, 1), and D' 2 is supported on negative instances of CCR(A;, 1) which are 1/2-distant from 
positive instances. 

As in [ ftFNR02 ], instead of working with D' 1 ,D' 2 , we shall work with distributions D\ and D2 on pairs 
of functions (/o, approximating distributions D[ and D' 2 respectively. D\ is got by choosing f\ : G — > 
S and u £ G independently and uniformly at random, and setting /o : G — > S to be fo(x) = f\(x + u) 
for all x e G. Since the probability that /1 is not injective is at most ('^') /|G| 3 = 0(l/\G\), we get that 
\\D\ — Z?5. Hi = 0(1/|G|), where || - [| ^ denotes the Li-norm or the total variation distance. D2 is got by 
choosing /o : G — ► £ and f\:G^S independently and uniformly at random. The probability that at least 
one of /o, fi is not injective is 0(1/|G|). The probability that their ranges fo(G) and fi(G) are not disjoint 
is also 0(1/|G|). Thus, \\D 2 - ^lli = °{ l /\ G \)- 

By applying the proof technique of Theorem 4.2 of [BFNR02] for distributions D\,D2, we get the 
following theorem. 

Theorem 4. Let G be a finite Abelian group and let k be the exponent of G. For testing CCR(fc, 1) on G, 
any classical randomized bounded error query algorithm on G requires n(y^\G\) queries. 
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